Sponsored link
Serve your customers, not your servers, with VERIO Linux VPS. Full-access test-drive here.
| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
ldapscripts: password disclosure
| Package(s): | ldapscripts | CVE #(s): | CVE-2007-5373 | |||
| Created: | March 17, 2008 | Updated: | March 19, 2008 | |||
| Description: | From the Debian advisory: Don Armstrong discovered that ldapscripts, a suite of tools to manipulate user accounts in LDAP, sends the password as a command line argument when calling LDAP programs, which may allow a local attacker to read this password from the process listing. | |||||
| Alerts: |
| |||||
(Log in to post comments)